<!DOCTYPE html>
<html>
<head>
	<!-- Global site tag (gtag.js) - Google Analytics -->
	<script async src="https://www.googletagmanager.com/gtag/js?id=UA-779203-2"></script>
	<script>
		window.dataLayer = window.dataLayer || [];
		function gtag(){dataLayer.push(arguments);}
		gtag('js', new Date());

		gtag('config', 'UA-779203-2');
	</script>

	<meta charset="utf-8">
	<title>SSL Converter - Convert SSL Certificates to different formats</title>
	<meta name="description" content="Use this SSL Converter to convert your SSL certificates and private keys to different formats such as PEM, DER, P7B, PFX or just create a command to convert the certificates yourself using OpenSSL.">
	<meta name="keywords" content="ssl converter, convert ssl certificate, ssl convert pem, ssl convert der">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">

	<link rel="alternate" type="application/rss+xml" title="RSS 2.0" href="https://www.sslshopper.com/feed.html" />

	<link href="/assets/templates/sslshopper2016/css/bootstrap.min.css" rel="stylesheet">
	<link href="/assets/templates/sslshopper2016/css/styles/style.css" rel="stylesheet">
	<link href="/assets/templates/sslshopper2016/css/styles/skin-blue.css" rel="stylesheet" id="color_theme">
	<link href="/assets/templates/sslshopper2016/css/custom.css" rel="stylesheet">
	<link href="/assets/templates/sslshopper2016/fontawesome-free-5.12.0-web/css/all.min.css" rel="stylesheet"> <!--load all styles -->

	<!-- Favicon -->
	<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=kPgMqpXJo8">
	<link rel="icon" type="image/png" href="/favicon-32x32.png?v=kPgMqpXJo8" sizes="32x32">
	<link rel="icon" type="image/png" href="/favicon-16x16.png?v=kPgMqpXJo8" sizes="16x16">
	<link rel="manifest" href="/manifest.json?v=kPgMqpXJo8">
	<link rel="mask-icon" href="/safari-pinned-tab.svg?v=kPgMqpXJo8" color="#5bbad5">
	<link rel="shortcut icon" href="/favicon.ico?v=kPgMqpXJo8">
	<meta name="theme-color" content="#ffffff">
</head>
<body>
	<div class="outer">

        <div id="promo-outer">
            <div id="promo-inner">
                Buy from the highest-rated provider &nbsp;
                <a href="https://www.digicert.com/order/order-1.php?rid=011592&rkey=8727e6b5" class="da-link btn btn btn-orange" onclick="gtag('event', 'page_view', { page_path: '/Buy_Now_DigiCert'})">Buy DigiCert Certificate <i class="fa fa-arrow-circle-right"></i></a>
                <span id="close">x</span>
            </div>
        </div>

		<div class="header-2">
			<div class="container">
				<div class="row">
					<div class="col-md-2">
						<div class="logo">
							<a href="/"><img src="/assets/templates/sslshopper2016/img/ssl-shopper-logo.svg" /></a>
						</div>
					</div> 
					<div class="col-md-9">
					</div>
					<div class="col-md-1">
					</div>
				</div>
			</div>
		</div>
		<div class="main-block">
			<div class="page-heading-two">
				<div class="container">
					<h1>SSL Converter</h1>
					<div class="clearfix"></div>
				</div>
			</div>

			<div class="container">
				<div class="blog-two">
					<div class="row">
						<div class="col-md-8" id="main_content_div">
							<!-- Javascript files -->
							<script src="/assets/templates/sslshopper2016/js/jquery.js"></script>
							<script src="/assets/templates/sslshopper2016/js/bootstrap.min.js"></script>
							<!-- Respond JS for IE8 -->
							<script src="/assets/templates/sslshopper2016/js/respond.min.js"></script>
							<!-- HTML5 Support for IE -->
							<script src="/assets/templates/sslshopper2016/js/html5shiv.js"></script>
							<!-- Main JS -->
							<script src="/assets/templates/sslshopper2016/js/main.js"></script>

							<p>Use this <strong>SSL Converter to convert SSL certificates</strong> to and from different formats such as <strong>pem, der, p7b, and pfx</strong>. Different platforms and devices require SSL certificates to be converted to different formats. For example, a Windows server exports and imports .pfx files while an Apache server uses individual PEM (.crt, .cer) files. To use the SSL Converter, just select your certificate file and its current type (it will try to detect the type from the file extension) and then select what type you want to convert the certificate to and click <strong>Convert Certificate</strong>. For more information about the different <a href="ssl-certificate-wizard.html">SSL certificate</a> types and how you can convert certificates on your computer using OpenSSL, see below.</p>
<p><form name="toolForm" id="toolForm" method="post" enctype="multipart/form-data" action="/assets/snippets/sslshopper/ajax/ajax_convert.php">
    <div class="panel panel-blue">
        <div class="panel-heading">Certificate Conversion Options</div>
        <div class="panel-body">
            <div class="form-group">
                <label for="certFile">Certificate File to Convert</label>
                <input class="form-control" type="file" name="certFile" id="certFile" size="45" onChange="setType(this);"  />
            </div>
            <div class="form-group" id="keyRow" style="display:none">
                <label for="keyFile">Private Key File</label>
                <input class="form-control" type="file" name="keyFile" id="keyFile" size="45" />
            </div>
            <div class="form-group" id="intermediateRow" style="display:none">
                <label for="intermediateFile">Chain Certificate File (optional)</label>
                <input class="form-control" type="file" name="intermediateFile" id="intermediateFile" size="45"  />
            </div>
            <div class="form-group" id="intermediateRow2" style="display:none">
                <label for="intermediateFile2">Chain Certificate File 2 (optional)</label>
                <input class="form-control" type="file" name="intermediateFile2" id="intermediateFile2" size="45"  />
            </div>
            <div class="form-group">
                <label for="certTypeFrom">Type of Current Certificate</label>
                <select class="form-control" name="certTypeFrom" id="certTypeFrom" onchange="fromTypeChanged(this.value);">
                    <option value="pem" selected="selected">Standard PEM</option>
                    <option value="der">DER/Binary</option>
                    <option value="p7b">P7B/PKCS#7</option>
                    <option value="pfx">PFX/PKCS#12</option>
                </select>
                <span id="detected_message" style="display:none">Detected type from file extension</span>
            </div>
            <div class="form-group">
                <label for="certTypeTo">Type To Convert To</label>
                <select class="form-control" name="certTypeTo" id="certTypeTo" onchange="toTypeChanged(this.value);">
                    <option value="pem" id="to_pem_option">Standard PEM</option>
                    <option value="der" selected="selected" id="to_der_option">DER/Binary</option>
                    <option value="p7b" id="to_p7b_option">P7B/PKCS#7</option>
                    <option value="pfx" id="to_pfx_option">PFX/PKCS#12</option>
                </select>
            </div>
            <div class="form-group" id="pfxPasswordRow" style="display:none">
                <label for="pfxPassword">PFX Password</label>
                <input class="form-control" type="password" name="pfxPassword" id="pfxPassword" size="45"  />
            </div>
            <div class="form-group text-right">
                <p id="privateKeyExplanation" style="display:none;"><img src="/assets/templates/sslshopper/images/sslchecker/error_small.png" alt="Warning" /> Your private key is intended to remain on the server. While we try to make this process as secure as possible by using SSL to encrypt the key when it is sent to the server, for complete security, we recommend that you manually convert the certificate on your server using the OpenSSL commands below.</p>
                <a href="#" class="btn btn-blue" id="convertButton" onclick="validateForm(); return false;">Convert Certificate</a>
            </div>
        </div>
    </div>
</form>
<script src="/assets/snippets/sslshopper/js/ssl-converter.js"></script></p>
<h3>PEM Format</h3>
<p>The PEM format is the most common format that <a href="certificate-authority-reviews.html">Certificate Authorities</a> issue certificates in. PEM certificates usually have extensions such as <strong>.pem, .crt, .cer, and .key</strong>. They are Base64 encoded ASCII files and contain "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" statements. Server certificates, intermediate certificates, and private keys can all be put into the PEM format.</p>
<p><strong>Apache and other similar servers</strong> use PEM format certificates. Several PEM certificates, and even the private key, can be included in one file, one below the other, but most platforms, such as Apache, expect the certificates and private key to be in separate files.</p>
<h3>DER Format</h3>
<p>The DER format is simply a binary form of a certificate instead of the ASCII PEM format. It sometimes has a file extension of <strong>.der</strong> but it often has a file extension of <strong>.cer</strong> so the only way to tell the difference between a DER .cer file and a PEM .cer file is to open it in a text editor and look for the BEGIN/END statements. All types of certificates and private keys can be encoded in DER format. DER is typically used with <strong>Java platforms</strong>. The SSL Converter can only convert certificates to DER format. If you need to convert a private key to DER, please use the <a href="http://openssl.org/docs/apps/rsa.html">OpenSSL commands on this page</a>.</p>
<h3>PKCS#7/P7B Format</h3>
<p>The PKCS#7 or P7B format is usually stored in Base64 ASCII format and has a file extension of <strong>.p7b or .p7c</strong>. P7B certificates contain "-----BEGIN PKCS7-----" and "-----END PKCS7-----" statements. A P7B file only contains certificates and chain certificates, not the private key. Several platforms support P7B files including <strong>Microsoft Windows and Java Tomcat</strong>.</p>
<h3>PKCS#12/PFX Format</h3>
<p>The PKCS#12 or PFX format is a binary format for storing the server certificate, any intermediate certificates, and the private key in one encryptable file. PFX files usually have extensions such as <strong>.pfx and .p12</strong>. PFX files are typically used on <strong>Windows machines</strong> to import and export certificates and private keys.</p>
<p>When converting a PFX file to PEM format, OpenSSL will put all the certificates and the private key into a single file. You will need to open the file in a text editor and copy each certificate and private key (including the BEGIN/END statements) to its own individual text file and save them as certificate.cer, CACert.cer, and privateKey.key respectively.</p>
<h3>OpenSSL Commands to Convert SSL Certificates on Your Machine</h3>
<p>It is highly recommended that you convert to and from .pfx files on your own machine using OpenSSL so you can keep the private key there. Use the following OpenSSL commands to convert SSL certificate to different formats on your own machine:</p>
<h3>OpenSSL Convert PEM</h3>
<p><strong>Convert PEM to DER</strong></p>
<p><code>openssl x509 -outform der -in certificate.pem -out certificate.der</code></p>
<p><strong>Convert PEM to P7B</strong></p>
<p><code> openssl crl2pkcs7 -nocrl -certfile certificate.cer -out certificate.p7b -certfile CACert.cer</code></p>
<p><strong>Convert PEM to PFX</strong></p>
<p><code>openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt</code></p>
<h3>OpenSSL Convert DER</h3>
<p><strong>Convert DER to PEM<br /> </strong></p>
<p><code>openssl x509 -inform der -in certificate.cer -out certificate.pem</code></p>
<h3>OpenSSL Convert P7B</h3>
<p><strong>Convert P7B to PEM</strong></p>
<p><code>openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer</code></p>
<p><strong>Convert P7B to PFX</strong></p>
<p><code>openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer</code></p>
<p><code>openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer</code></p>
<h3>OpenSSL Convert PFX</h3>
<p><strong>Convert PFX to PEM</strong></p>
<p><code>openssl pkcs12 -in certificate.pfx -out certificate.cer -nodes</code></p>
<p>If you need to convert a Java Keystore file to a different format, it usually easier to create a new private key and certificates but it is possible to <a href="article-move-your-java-keytool-ssl-certificate-to-openssl.html">convert a Java Keystore to PEM format</a>.</p>
						</div>

						<div class="col-md-4" id="sideblocks_div">
							<div class="sidebar">
								<!-- Carbon ads. Also remove javascript in ssl-checker.js, if removing -->
<script async type="text/javascript" src="//cdn.carbonads.com/carbon.js?serve=CE7D6237&placement=wwwsslshoppercom" id="_carbonads_js"></script>
<link href="/assets/templates/sslshopper2016/css/carbon.css" rel="stylesheet" async>

<div class="s-widget">
    <h5><i class="fa fa-search color"></i> Top Resources</h5>
    <div id="home_quick_search_buttons">
        <a href="/ssl-certificate-wizard.html" class="btn btn-blue"><i class="fa fa-magic"></i> SSL Wizard</a><br/>
        <a href="/cheapest-ssl-certificates.html" class="btn btn-blue"><i class="fa fa-dollar-sign"></i> Cheap SSL Certificates</a><br/>
        <a href="/cheap-code-signing-certificates.html" class="btn btn-blue"><i class="fa fa-code"></i> Code Signing Certificates</a>
        <a href="/best-ssl-wildcard-certificate.html" class="btn btn-blue"><i class="fa fa-asterisk"></i> Wildcard Certificates</a><br/>
        <a href="/ssl-certificate-tools.html" class="btn btn-blue"><i class="fa fa-wrench"></i> SSL Tools</a>

        <br/><br/>
        <div>
            <strong>#1 Rated Certificate Provider</strong><br/>
            <a href="https://order.digicert.com/step1?rid=011592" onclick="gtag('event', 'page_view', { page_path: '/Buy_Now_DigiCert'})">
                <img src="/assets/images/CALogos/large/digicert.png" class="medium-logo-image">
            </a>
            <div class="caRating"><span class="stars "><i class="fa fa-star"></i><i class="fa fa-star"></i><i class="fa fa-star"></i><i class="fa fa-star"></i><i class="fa fa-star"></i></span></div>
            <a href="https://order.digicert.com/step1?rid=011592" class="btn btn-orange" onclick="gtag('event', 'page_view', { page_path: '/Buy_Now_DigiCert'})"><i class="fa fa-dollar-sign"></i> Get Pricing</a>
        </div>
    </div>
</div>
							</div>
						</div>
					</div>
				</div>

			</div>

		</div>

		<footer>
			<div class="container">
				<p class="pull-left">&copy; 2021 SSL Shopper&trade;
					<a href="https://www.allinclusivist.com/resorts/cheapest-all-inclusive" style="color:#ccc;text-decoration:none;" >Cheapest All-Inclusive Resorts</a> |
					 All Rights Reserved | <a href="/full-disclosure.html" style="color:#ccc;text-decoration:none;" >Full Disclosure</a>
					<!-- <a href="#" class="facebook"><i class="fa fa-facebook circle-3"></i></a> -->
					<a href="https://twitter.com/sslshopper" class="twitter"><i class="fab fa-twitter circle-3"></i></a>
				</p>
				<ul class="list-inline pull-right"><li class="first"><a href="https://www.sslshopper.com/" title="SSL Certificate Comparison and Reviews" >Home</a></li>
<li><a href="ssl-certificate-wizard.html" title="Compare SSL with the SSL Certificate Wizard" >SSL Wizard</a></li>
<li><a href="ssl-faq.html" title="SSL FAQ" >SSL FAQ</a></li>
<li><a href="certificate-authority-reviews.html" title="SSL Certificate Reviews" >SSL Reviews</a></li>
<li><a href="ssl-security-news.html" title="SSL News" >SSL News</a></li>
<li><a href="site-map.html" title="Site Map" >Site Map</a></li>
<li><a href="about-ssl-shopper.html" title="About SSL Shopper" >About</a></li>
<li class="last current"><a href="ssl-certificate-tools.html" title="SSL Certificate Tools" >SSL Tools</a></li>
</ul>
				<div class="clearfix"></div>

				<div id="newsletter_signup_form">
					<h4>Join Our Newsletter</h4>
					<p>Sign up to receive occasional SSL Certificate deal emails.</p>

					<!-- Begin Mailchimp Signup Form -->
					<link href="//cdn-images.mailchimp.com/embedcode/horizontal-slim-10_7.css" rel="stylesheet" type="text/css">
					<div id="mc_embed_signup">
						<form action="https://sslshopper.us20.list-manage.com/subscribe/post?u=0611c731210adfbeda4351815&amp;id=18144b6464" method="post" id="mc-embedded-subscribe-form" name="mc-embedded-subscribe-form" class="validate" target="_blank" novalidate>
							<div id="mc_embed_signup_scroll" class="input-group">
								<input class="form-control" type="email" value="" name="EMAIL" class="email" id="mce-EMAIL" placeholder="email address" required>
								<span class="input-group-btn">
										<button class="btn btn-color" type="submit" value="Subscribe" name="subscribe" id="mc-embedded-subscribe">Subscribe</button>
									</span>
								<!-- real people should not fill this in and expect good things - do not remove this or risk form bot signups-->
								<div style="position: absolute; left: -5000px;" aria-hidden="true"><input type="text" name="b_0611c731210adfbeda4351815_18144b6464" tabindex="-1" value=""></div>
							</div>
						</form>
					</div>
					<!--End mc_embed_signup-->
				</div>

			</div>
		</footer>
	</div>
</body>
</html>